Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/065ac7bb-bf21-3a5a-847d-e97aa48db175.roa
File:                     065ac7bb-bf21-3a5a-847d-e97aa48db175.roa (raw, json)
Hash identifier:          nUWfDFo0wSp1zVNnOpvu2i7azKruMDSBYCWh9m/gIjw=
Subject key identifier:   BF:9B:D8:41:2A:B1:76:9E:7B:93:31:E4:7E:A4:E5:8C:26:58:4D:38
Certificate issuer:       /CN=1bfbc46f-3c48-4406-ba8c-a423b906a63e
Certificate serial:       010D0C9F43285849C904D78F8B77E6DADB047D00
Authority key identifier: 46:5D:03:13:67:9C:B3:F8:AC:69:42:A1:7C:9B:B7:86:4A:DB:F6:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/065ac7bb-bf21-3a5a-847d-e97aa48db175.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     13427
IP address blocks:        137.83.103.0/24 maxlen: 24
                          173.243.64.0/20 maxlen: 20
                          192.96.17.0/24 maxlen: 24
                          192.156.255.0/24 maxlen: 24
                          198.153.60.0/22 maxlen: 22
                          2604:8d80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/1bfbc46f-3c48-4406-ba8c-a423b906a63e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/1bfbc46f-3c48-4406-ba8c-a423b906a63e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:d7:8f:8b:77:e6:da:db:04:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bfbc46f-3c48-4406-ba8c-a423b906a63e
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=03e71da9-d10d-4be6-91ab-9f7981b7c337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2c:bc:ef:02:e0:9d:11:20:8d:fb:43:6b:02:
                    55:6a:37:86:50:b3:ad:05:55:d0:b7:fe:f8:f4:13:
                    c3:29:e4:b2:14:d7:5d:ec:d5:6a:05:bf:77:75:ae:
                    c9:a7:01:5a:11:5a:13:ce:01:40:c0:1e:93:10:fc:
                    1d:05:f0:4f:bc:65:06:b1:e8:5c:3d:6f:5e:0e:d6:
                    05:15:d5:cb:01:ea:a0:fc:d5:9c:5c:0f:ac:51:94:
                    d2:7e:34:51:7e:be:b6:87:b0:77:34:85:60:6d:9e:
                    b6:27:d5:33:4b:de:e9:67:b5:b9:44:0e:5d:ea:31:
                    45:ce:4b:be:4d:8c:b1:b1:a3:18:5e:46:8c:22:a3:
                    1d:0b:6f:b7:a3:49:95:69:d6:4e:d8:9a:d0:63:bc:
                    e9:1a:6f:48:e3:20:38:23:ba:6a:6e:1e:ae:38:6d:
                    17:d5:aa:1c:e5:9a:5e:b0:ed:cf:51:0d:ed:28:a3:
                    35:b5:4d:93:d4:4a:6f:b7:24:2b:9b:9e:47:6f:b8:
                    65:0d:65:16:4b:a7:06:fe:35:9e:fc:b1:1b:f8:4f:
                    45:a2:1f:c4:14:30:1c:b4:92:b9:f3:ac:50:d7:77:
                    c8:1b:55:15:99:c0:91:1b:35:9f:e3:74:16:e4:14:
                    13:01:fc:42:e7:a3:77:a8:cc:a0:a7:13:92:bf:b0:
                    f1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9B:D8:41:2A:B1:76:9E:7B:93:31:E4:7E:A4:E5:8C:26:58:4D:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/065ac7bb-bf21-3a5a-847d-e97aa48db175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/1bfbc46f-3c48-4406-ba8c-a423b906a63e.crl

            X509v3 Authority Key Identifier:
                keyid:46:5D:03:13:67:9C:B3:F8:AC:69:42:A1:7C:9B:B7:86:4A:DB:F6:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.103.0/24
                  173.243.64.0/20
                  192.96.17.0/24
                  192.156.255.0/24
                  198.153.60.0/22
                IPv6:
                  2604:8d80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:de:1d:a8:1b:6e:59:9d:65:95:86:53:76:80:f7:bd:19:40:
         71:41:18:cf:0b:69:c5:af:df:29:71:25:1b:14:1b:e3:69:14:
         1e:48:99:d4:09:72:2e:65:bc:ce:40:d9:a5:4c:5f:cf:c3:59:
         ae:a8:3d:08:64:f2:f6:4b:ca:ef:60:97:ac:9b:12:13:5c:a3:
         a8:fd:b3:47:61:bd:bd:bb:ef:3a:79:1d:75:f3:4e:d6:b1:cc:
         bf:05:9b:d8:14:4f:ab:93:3c:29:ef:f1:34:1e:8b:07:f6:73:
         be:85:29:9a:fa:74:a6:50:9e:f1:a0:de:7f:4f:cd:04:14:88:
         fe:5f:9b:12:a6:7b:05:6b:f5:5e:ab:0a:1d:34:24:4b:a0:f7:
         b2:37:5f:51:86:56:94:87:0a:80:e7:81:fa:f6:b0:16:83:8e:
         00:60:0d:ea:e7:d8:f4:9c:e8:3b:d4:ad:c6:98:44:dc:d8:96:
         77:49:2e:68:06:d4:db:79:df:71:9d:09:a8:28:62:1b:26:7d:
         d3:d7:82:0b:4d:ec:e6:05:6e:4b:81:17:20:ec:83:f3:b0:92:
         00:44:b6:13:42:dd:d0:65:90:3a:8b:e8:09:a4:0f:1a:48:d5:
         15:fe:2a:5e:23:4e:66:2e:e0:a6:9d:87:a9:3b:04:9e:b5:e0:
         3b:62:b3:7d
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEnJBNePi3fm2tsEfQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWJmYmM0NmYtM2M0OC00NDA2LWJhOGMtYTQyM2I5MDZh
NjNlMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk
MDNlNzFkYTktZDEwZC00YmU2LTkxYWItOWY3OTgxYjdjMzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCy87wLgnREgjftDawJVajeGULOtBVXQt/74
9BPDKeSyFNdd7NVqBb93da7JpwFaEVoTzgFAwB6TEPwdBfBPvGUGsehcPW9eDtYF
FdXLAeqg/NWcXA+sUZTSfjRRfr62h7B3NIVgbZ62J9UzS97pZ7W5RA5d6jFFzku+
TYyxsaMYXkaMIqMdC2+3o0mVadZO2JrQY7zpGm9I4yA4I7pqbh6uOG0X1aoc5Zpe
sO3PUQ3tKKM1tU2T1EpvtyQrm55Hb7hlDWUWS6cG/jWe/LEb+E9Foh/EFDActJK5
86xQ13fIG1UVmcCRGzWf43QW5BQTAfxC56N3qMygpxOSv7DxVQIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFL+b2EEqsXaee5Mx5H6k5YwmWE04MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmZi
YzQ2Zi0zYzQ4LTQ0MDYtYmE4Yy1hNDIzYjkwNmE2M2UvMDY1YWM3YmItYmYyMS0z
YTVhLTg0N2QtZTk3YWE0OGRiMTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWJmYmM0NmYtM2M0OC00NDA2LWJh
OGMtYTQyM2I5MDZhNjNlLzFiZmJjNDZmLTNjNDgtNDQwNi1iYThjLWE0MjNiOTA2
YTYzZS5jcmwwHwYDVR0jBBgwFoAURl0DE2ecs/isaUKhfJu3hkrb9skwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmZiYzQ2Zi0zYzQ4LTQ0MDYtYmE4Yy1hNDIz
YjkwNmE2M2UuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAiVNnAwQE
rfNAAwQAwGARAwQAwJz/AwQCxpk8MA0EAgACMAcDBQAmBI2AMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAATe
HagbblmdZZWGU3aA970ZQHFBGM8LacWv3ylxJRsUG+NpFB5ImdQJci5lvM5A2aVM
X8/DWa6oPQhk8vZLyu9gl6ybEhNco6j9s0dhvb277zp5HXXzTtaxzL8Fm9gUT6uT
PCnv8TQeiwf2c76FKZr6dKZQnvGg3n9PzQQUiP5fmxKmewVr9V6rCh00JEug97I3
X1GGVpSHCoDngfr2sBaDjgBgDern2PSc6DvUrcaYRNzYlndJLmgG1Nt533GdCago
YhsmfdPXggtN7OYFbkuBFyDsg/OwkgBEthNC3dBlkDqL6AmkDxpI1RX+Kl4jTmYu
4Kadh6k7BJ614Dtis30=
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:05:38 2025 by rpki-client